Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/608YiJ2WYCJ1UibWJUzIJYSiZGM.roa
File: 608YiJ2WYCJ1UibWJUzIJYSiZGM.roa (raw, json)
Hash identifier: BCx3bzHYbC6kYvw6teK23t5+NuKtehi7MS8Lurd7AMI=
Subject key identifier: EB:4F:18:88:9D:96:60:22:75:52:26:D6:25:4C:C8:25:84:A2:64:63
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F1058663A70FAA7FCC32D664CD70E84E6
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/608YiJ2WYCJ1UibWJUzIJYSiZGM.roa
Signing time: Sun 28 Jun 2026 22:27:36 +0000
ROA not before: Sun 28 Jun 2026 22:27:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150043
IP address blocks: 201.11.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:58:66:3a:70:fa:a7:fc:c3:2d:66:4c:d7:0e:84:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 28 22:27:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb4f18889d966022755226d6254cc82584a26463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b3:52:58:b5:02:b7:45:fa:66:85:71:81:2e:
7c:93:3a:9a:a3:6b:14:4d:d2:15:bd:46:0a:9e:22:
e6:cd:71:db:ca:dd:5f:71:24:e1:59:7e:fc:9b:a7:
48:9d:13:e4:75:46:d2:7f:24:7e:5a:17:e6:07:54:
7f:17:70:b4:9e:49:19:d9:13:76:95:3b:90:11:75:
31:85:71:06:a3:dc:13:96:7a:ad:d0:16:6f:30:e7:
af:cf:b0:aa:80:9b:11:fb:2c:be:de:a3:bf:8d:8d:
6a:6a:77:19:62:99:31:e9:44:d4:2b:7b:a6:30:e2:
e8:50:12:03:e6:28:b3:03:ea:72:3e:30:f8:a8:29:
99:3a:f6:4a:1d:dd:eb:6d:82:88:1c:ca:7e:02:60:
83:42:d4:a5:42:27:cd:26:a8:6b:08:7c:5c:35:1c:
b3:6c:b4:02:b8:6c:bd:4d:21:7e:1f:ec:33:8e:b0:
c4:dd:15:a1:49:c8:4c:bb:c5:2e:6f:9c:ec:36:c8:
77:f0:e1:18:73:d9:09:ff:c8:cc:20:01:22:f2:fe:
a7:78:36:d9:a9:67:e0:99:8b:f6:78:ab:f7:76:e5:
c2:bd:a7:10:44:13:ed:a6:7b:e8:82:82:28:90:d5:
2b:f5:cb:70:20:33:d8:2b:7a:b1:59:6e:df:81:b5:
c7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4F:18:88:9D:96:60:22:75:52:26:D6:25:4C:C8:25:84:A2:64:63
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/608YiJ2WYCJ1UibWJUzIJYSiZGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.11.229.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:ca:f9:9e:8a:c8:0c:c4:68:04:82:bc:d1:b3:a5:d0:85:9f:
fd:8d:41:9c:07:a5:7c:bd:b1:ee:1d:14:0b:95:ac:47:4e:30:
34:88:58:e0:e4:a5:4f:2c:13:7c:d9:15:4e:ec:e3:3c:e5:a8:
56:8a:41:c3:42:e5:94:d5:d5:c8:c5:d9:a3:fa:60:96:26:04:
f4:15:e3:75:80:17:40:d8:7e:cc:66:05:0c:2c:27:07:1a:7c:
88:a6:33:64:e9:44:5e:f8:41:b2:43:cb:de:76:64:5a:2a:58:
79:76:ae:be:be:dc:a5:ad:89:bd:58:12:47:68:33:82:c0:fc:
80:5b:25:f6:06:ab:30:39:61:b9:55:f0:02:2a:7a:c0:b0:bc:
5d:58:ec:ce:97:83:ba:25:b4:2d:73:7e:7f:99:cb:72:65:15:
10:1f:26:a4:ae:36:21:9a:a3:b8:26:41:27:21:f9:2f:39:62:
f4:c7:7a:f9:26:cd:8c:2a:1e:37:23:75:34:53:8a:63:cd:ba:
35:83:10:95:7e:1a:c7:04:ab:e9:e5:f5:72:cb:6d:92:59:2d:
c0:08:32:8e:cc:8e:ca:37:78:e1:a0:56:e3:87:ab:fd:2f:1e:
9f:78:bc:32:66:6d:cf:4b:9f:3f:8d:dc:b1:f7:b9:dd:c5:4b:
f2:d3:c0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:11 2026 by rpki-client